All Apps and Add-ons

outputcsv export directory

henry_ty_leung
Explorer

Hi There,

Just wondering if i can change the export directory (i.e F:\ExportResults) using outputcsv command ?

Thanks
Henry

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi henry_ty_leung,

No you cannot.
You could create a custom script that is triggered after the search is done and the outputcsv has written the file and explicitly put it into a Splunk bin folder to move / copy file to the final directory http://docs.splunk.com/Documentation/Splunk/6.2.0/Search/AddthecustomcommandtoSplunk

The reason why this was done, is partly security related; to prevent search users from being able to have Splunk create files in arbitrary locations.

hope this helps ...

cheers, MuS

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!